User roles for collecting metadata

When you add storage systems, switches, and fabrics for monitoring, you must add the credentials of users with the appropriate privileges for collecting metadata. This metadata includes configuration, status, capacity, and performance metadata. It does not include application, personal, or identity data.

The role or user group that is assigned to the user name must have the appropriate privileges to monitor the metadata that is collected for a device.

Roles: The roles and user groups are configured on the device that you add for monitoring.
Security: The user credentials and IP address that you provide for connecting to a device are encrypted and stored securely in the IBM Cloud® instance for IBM Storage Insights. To collect metadata about the device, that information is transmitted over a secure channel to the locally installed data collector. The information is never stored on the host where the data collector is installed; it exists temporarily in the application memory for the data collector only.
Table 1. User role by device
Type of device Required user role for collecting configuration, status, and capacity metadata (probes) Required user role for collecting performance metadata (performance monitor)  
DS8000 Monitor role or role that includes monitoring privileges. Same role as probes  
Dell EMC Unity Administrator role. The user must have administrative account credentials for the storage system. Same role as probes  
Dell EMC VMAX Administrator role. The user must have administrative account credentials for Solutions Enabler or SMI-S Provider. Same role as probes  
Dell EMC VNX Administrator role. The user must have administrative account credentials for Solutions Enabler or SMI-S Provider. Same role as probes  
Dell EMC VNXe Administrator role. The user must have administrative account credentials for Solutions Enabler or SMI-S Provider. Same role as probes  

Hitachi VSP using Hitachi Command Suite

In Hitachi Device Manager, the user for the Export Tool must have the Storage Administrator (Performance Management) role. In Hitachi Command Suite, ViewGroup or higher and AdminGroup permission. Provisioning is not available.
Hitachi VSP using Hitachi Ops Center

AD domain user belongs to a User Group with MonitoringRole or higher permission for connecting to the Hitachi Ops Center Administrator that is associated with the storage system.

For more information about assigning Ops Center Administrator roles to user groups, see Administer Ops Center Administrator.

AD domain user belongs to a User Group with MonitoringRole or higher permission for connecting to the Hitachi Ops Center Administrator that is associated with the storage system.

For more information about assigning Ops Center Administrator roles to user groups, see Administer Ops Center Administrator.

 Provisioning is not available.
IBM Storage FlashSystem 900 Monitor role or role that includes monitoring privileges. Same role as probes  
IBM FlashSystem A9000 Any role Monitor role or role that includes monitoring privileges.  
IBM FlashSystem A9000R Any role Monitor role or role that includes monitoring privileges.  

IBM Storage FlashSystem 5000

IBM Storage FlashSystem 5100

IBM Storage FlashSystem 7200

IBM Storage FlashSystem 9100

IBM Storage FlashSystem 9200

IBM Storage FlashSystem V9000

 Monitor role or higher For versions earlier than 8.3.1.2, Administrator, or SecurityAdmin. For 8.3.1.2 or later, any role but some limitations might apply. Learn more  
IBM Cloud Object Storage Operator, System Administrator, or Super User role Performance monitoring is not available  
IBM Storage Accelerate Any role Monitor role or role that includes monitoring privileges.  
IBM Storage Scale   Any role for file storage. Performance monitoring is not available for object storage.  
NetApp Operator role or higher Same role as probes  
Pure FlashArray//M Role with read-only permission or higher Same role as probes  
Pure FlashArray//X Role with read-only permission or higher Same role as probes  
SAN Volume Controller Monitor role or higher For versions earlier than 8.3.1.2, Administrator, or SecurityAdmin. For 8.3.1.2 or later, any role but some limitations might apply. Learn more  

Storwize V3500

Storwize V3700

Storwize V5000

Storwize V7000

 Monitor role or higher For versions earlier than 8.3.1.2, Administrator, or SecurityAdmin. For 8.3.1.2 or later, any role but some limitations might apply. Learn more  
Storwize V7000 Unified Monitor role or higher Administrator  
Switches: Brocade Chassis-role permission or higher Chassis-role permission or higher  
Switches: Cisco Network-admin role or network-operator role Network-admin role or network-operator role  
VMware vCenter Server resources:
  • ESXi hosts 6.5 or later
  • Virtual machines on ESXi hosts
  • Role: Read Only (minimum). For example, the Administrator role or Virtual Machine Power® User role.
  • Privilege: Browse Datastore
 Same requirements as probes  
XIV Any role Monitor role or higher